DNS, IIS and FTP

Hello,

Thank you for taking the time to read this. I multiposted because this topic
includes areas of interest for each of these newsgroups. Please don't be
mad. :)

In active directory I create a domain called KJM.ds.

I create a zone called "abc" which deals with abc.com web forwarders and
pointers. A corresponding web site is created in IIS with the headers
necessary to get the user there.

I want to create an FTP site for this domain.

Now I create a host in the zone called FTP which creates ftp.abc.com. IN IIS
I create a virtual directory under the default FTP site using User Isolation
(Active Directory - so as to allow the user to have multiple FTP logins with
their own space).

Unfortuantley the user though I enter the right username and password will
not seem to authenticate. Can you give hints what I am doing wrong?

Also, for their home directory for this FTP account do I:

create a share with this username

Or

in AD make thier home direcctory to be the specified folder.

Again thank you for your help....

--
Do you have people in your band or group that only play by ear?
When transposing songs do those that play by ear struggle and
does it leave vocals and band members without a recording in the
correct key to practice with?
Visit http://www.jerichoband.net/jericho/keychange.htm
where you can have the song's key changed to what you need
without negatively affecting the tempo or instruments in the recording...

Kevin
Thu Feb 02 15:42:17 CST 2006

scorpion53061 wrote:
> Hello,
>
> Thank you for taking the time to read this. I multiposted because
> this topic includes areas of interest for each of these newsgroups.
> Please don't be mad. :)
>
> In active directory I create a domain called KJM.ds.
>
> I create a zone called "abc" which deals with abc.com web forwarders
> and pointers. A corresponding web site is created in IIS with the
> headers necessary to get the user there.
>
> I want to create an FTP site for this domain.
>
> Now I create a host in the zone called FTP which creates ftp.abc.com.
> IN IIS I create a virtual directory under the default FTP site using
> User Isolation (Active Directory - so as to allow the user to have
> multiple FTP logins with their own space).
>
> Unfortuantley the user though I enter the right username and password
> will not seem to authenticate. Can you give hints what I am doing
> wrong?
>
> Also, for their home directory for this FTP account do I:
>
> create a share with this username
>
> Or
>
> in AD make thier home direcctory to be the specified folder.

FTP virtual home directories and User account home directories are
unrelated. You can make them the same directory, but inheritly they are not
the same and are different processes.

The home directory on the user account can be connected to by
%HOMEDRIVE%%HOMEPATH%
http://support.microsoft.com/kb/320043/en-us

While FTP virtual directories are strictly a IIS process so that when a user
authenticates with the FTP server their virtual directory becomes the user's
Root directory.
http://support.microsoft.com/kb/172138/en-us

If your having problems with FTP virtual directories, I suggest the IIS
group.



--
Best regards,
Kevin D. Goodknecht Sr. [MVP]
Hope This Helps
===================================
When responding to posts, please "Reply to Group"
via your newsreader so that others may learn and
benefit from your issue, to respond directly to
me remove the nospam. from my email address.
===================================
http://www.lonestaramerica.com/
http://support.wftx.us/
https://secure.lsaol.com/
===================================
Use Outlook Express?... Get OE_Quotefix:
It will strip signature out and more
http://home.in.tum.de/~jain/software/oe-quotefix/
===================================
Keep a back up of your OE settings and folders
with OEBackup:
http://www.oehelp.com/OEBackup/Default.aspx
===================================

scorpion53061
Thu Feb 02 16:20:15 CST 2006

I am studying these links. If you have any thoughts on this I would be
appreciative. Is there no gui that acomplishes these tasks?

http://www.microsoft.com/technet/prodtechnol/WindowsServer2003/Library/IIS/b63de8ef-e3c5-456d-a8ca-7af4198819d4.mspx
and
http://www.microsoft.com/technet/prodtechnol/WindowsServer2003/Library/IIS/66cf2a1d-26f4-47f5-b4ff-af4011cdeffb.mspx) .
"Kevin D. Goodknecht Sr. [MVP]" <admin@nospam.WFTX.US> wrote in message
news:e95fMGEKGHA.916@TK2MSFTNGP10.phx.gbl...
> scorpion53061 wrote:
>> Hello,
>>
>> Thank you for taking the time to read this. I multiposted because
>> this topic includes areas of interest for each of these newsgroups.
>> Please don't be mad. :)
>>
>> In active directory I create a domain called KJM.ds.
>>
>> I create a zone called "abc" which deals with abc.com web forwarders
>> and pointers. A corresponding web site is created in IIS with the
>> headers necessary to get the user there.
>>
>> I want to create an FTP site for this domain.
>>
>> Now I create a host in the zone called FTP which creates ftp.abc.com.
>> IN IIS I create a virtual directory under the default FTP site using
>> User Isolation (Active Directory - so as to allow the user to have
>> multiple FTP logins with their own space).
>>
>> Unfortuantley the user though I enter the right username and password
>> will not seem to authenticate. Can you give hints what I am doing
>> wrong?
>>
>> Also, for their home directory for this FTP account do I:
>>
>> create a share with this username
>>
>> Or
>>
>> in AD make thier home direcctory to be the specified folder.
>
> FTP virtual home directories and User account home directories are
> unrelated. You can make them the same directory, but inheritly they are
> not
> the same and are different processes.
>
> The home directory on the user account can be connected to by
> %HOMEDRIVE%%HOMEPATH%
> http://support.microsoft.com/kb/320043/en-us
>
> While FTP virtual directories are strictly a IIS process so that when a
> user
> authenticates with the FTP server their virtual directory becomes the
> user's
> Root directory.
> http://support.microsoft.com/kb/172138/en-us
>
> If your having problems with FTP virtual directories, I suggest the IIS
> group.
>
>
>
> --
> Best regards,
> Kevin D. Goodknecht Sr. [MVP]
> Hope This Helps
> ===================================
> When responding to posts, please "Reply to Group"
> via your newsreader so that others may learn and
> benefit from your issue, to respond directly to
> me remove the nospam. from my email address.
> ===================================
> http://www.lonestaramerica.com/
> http://support.wftx.us/
> https://secure.lsaol.com/
> ===================================
> Use Outlook Express?... Get OE_Quotefix:
> It will strip signature out and more
> http://home.in.tum.de/~jain/software/oe-quotefix/
> ===================================
> Keep a back up of your OE settings and folders
> with OEBackup:
> http://www.oehelp.com/OEBackup/Default.aspx
> ===================================
>
>

scorpion53061
Fri Feb 03 06:38:21 CST 2006

Update: I successfully ran this script.

iisftp /SetADProp test FTPDir F:\websites\test\subfolder /s 192.168.0.102

test is the username.
(If doing this on your own and attempt to do it remotely (public IP) you
need to include flags for username (-u) and password (-p). Even then RPC
Server errors abounded.

However, it still will not let me login using that persons
username/password.

Screenshots:
http://www.onteorasoftware.net/kjmsolutions/cmdoutput.JPG

http://www.onteorasoftware.net/kjmsolutions/ev.JPG


"scorpion53061" <scorpion_53061@nospamhereyahoo.com> wrote in message
news:OanmdbEKGHA.3272@tk2msftngp13.phx.gbl...
>I am studying these links. If you have any thoughts on this I would be
>appreciative. Is there no gui that acomplishes these tasks?
>
> http://www.microsoft.com/technet/prodtechnol/WindowsServer2003/Library/IIS/b63de8ef-e3c5-456d-a8ca-7af4198819d4.mspx
> and
> http://www.microsoft.com/technet/prodtechnol/WindowsServer2003/Library/IIS/66cf2a1d-26f4-47f5-b4ff-af4011cdeffb.mspx) .
> "Kevin D. Goodknecht Sr. [MVP]" <admin@nospam.WFTX.US> wrote in message
> news:e95fMGEKGHA.916@TK2MSFTNGP10.phx.gbl...
>> scorpion53061 wrote:
>>> Hello,
>>>
>>> Thank you for taking the time to read this. I multiposted because
>>> this topic includes areas of interest for each of these newsgroups.
>>> Please don't be mad. :)
>>>
>>> In active directory I create a domain called KJM.ds.
>>>
>>> I create a zone called "abc" which deals with abc.com web forwarders
>>> and pointers. A corresponding web site is created in IIS with the
>>> headers necessary to get the user there.
>>>
>>> I want to create an FTP site for this domain.
>>>
>>> Now I create a host in the zone called FTP which creates ftp.abc.com.
>>> IN IIS I create a virtual directory under the default FTP site using
>>> User Isolation (Active Directory - so as to allow the user to have
>>> multiple FTP logins with their own space).
>>>
>>> Unfortuantley the user though I enter the right username and password
>>> will not seem to authenticate. Can you give hints what I am doing
>>> wrong?
>>>
>>> Also, for their home directory for this FTP account do I:
>>>
>>> create a share with this username
>>>
>>> Or
>>>
>>> in AD make thier home direcctory to be the specified folder.
>>
>> FTP virtual home directories and User account home directories are
>> unrelated. You can make them the same directory, but inheritly they are
>> not
>> the same and are different processes.
>>
>> The home directory on the user account can be connected to by
>> %HOMEDRIVE%%HOMEPATH%
>> http://support.microsoft.com/kb/320043/en-us
>>
>> While FTP virtual directories are strictly a IIS process so that when a
>> user
>> authenticates with the FTP server their virtual directory becomes the
>> user's
>> Root directory.
>> http://support.microsoft.com/kb/172138/en-us
>>
>> If your having problems with FTP virtual directories, I suggest the IIS
>> group.
>>
>>
>>
>> --
>> Best regards,
>> Kevin D. Goodknecht Sr. [MVP]
>> Hope This Helps
>> ===================================
>> When responding to posts, please "Reply to Group"
>> via your newsreader so that others may learn and
>> benefit from your issue, to respond directly to
>> me remove the nospam. from my email address.
>> ===================================
>> http://www.lonestaramerica.com/
>> http://support.wftx.us/
>> https://secure.lsaol.com/
>> ===================================
>> Use Outlook Express?... Get OE_Quotefix:
>> It will strip signature out and more
>> http://home.in.tum.de/~jain/software/oe-quotefix/
>> ===================================
>> Keep a back up of your OE settings and folders
>> with OEBackup:
>> http://www.oehelp.com/OEBackup/Default.aspx
>> ===================================
>>
>>
>
>

Kevin
Fri Feb 03 10:39:28 CST 2006

scorpion53061 wrote:
> Update: I successfully ran this script.
>
> iisftp /SetADProp test FTPDir F:\websites\test\subfolder /s
> 192.168.0.102
>
> test is the username.
> (If doing this on your own and attempt to do it remotely (public IP)
> you
> need to include flags for username (-u) and password (-p). Even then
> RPC
> Server errors abounded.
>
> However, it still will not let me login using that persons
> username/password.

Is this FTP on a member server, domain controller, or what?

I have found through my own experience, at least FTP on Win2k3, that if the
FTP server is on a member server, and you logon to FTP with just "username"
and the account is a domain account, the member server does not check the
domain accounts to authenticate. If you use only "username" it must be a
local account. To authenticate with FTP using a domain account on a member
server, you have to use the UPN account logon in the format of
username@UPNDomainSuffix I have not verified this if the FTP server is on a
DC.


--
Best regards,
Kevin D. Goodknecht Sr. [MVP]
Hope This Helps
===================================
When responding to posts, please "Reply to Group"
via your newsreader so that others may learn and
benefit from your issue, to respond directly to
me remove the nospam. from my email address.
===================================
http://www.lonestaramerica.com/
http://support.wftx.us/
https://secure.lsaol.com/
===================================
Use Outlook Express?... Get OE_Quotefix:
It will strip signature out and more
http://home.in.tum.de/~jain/software/oe-quotefix/
===================================
Keep a back up of your OE settings and folders
with OEBackup:
http://www.oehelp.com/OEBackup/Default.aspx
===================================

Michael
Thu Feb 09 18:33:24 CST 2006

scorpion53061 wrote:
> Update: I successfully ran this script.
>
> iisftp /SetADProp test FTPDir F:\websites\test\subfolder /s 192.168.0.102
>
> test is the username.
> (If doing this on your own and attempt to do it remotely (public IP) you
> need to include flags for username (-u) and password (-p). Even then RPC
> Server errors abounded.
>
> However, it still will not let me login using that persons
> username/password.
If this server is a DC, then the users would need the ability to LOG ON
LOCALLY. A security policy setting. If your "Administrator" account
can authenticate successfully, it is because that account has the log on
locally right.

Regards,
Michael